Today's TweetDeck vulnerability brought the entire service down for hours — but early accounts indicate it may have started with a simple accident. At 8:05EDT, the account @FiroXL tweeted a simple test: some javascript tags along with a heart symbol and a German phrase that translates roughly to "I wonder if this will work..." It worked: the tags did their job and the heart symbol, which Twitter would normally mangle, came through TweetDeck just fine, indicating the service was executing Javascript commands from plaintext. @FiroXL wasn't aware of the initial vulnerability, discovered back in 2011, but he had accidentally stumbled back onto it.
via The Verge - All Posts http://ift.tt/UtXGmR
No comments:
Post a Comment